ROOT-OS-DEBIAN-12-CVE-2026-55200 CVE-2026-55200 in libssh2 - Patched by Root

Root has patched CVE-2026-55200 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-15661 CVE-2025-15661 in libssh2 - Patched by Root

Root has patched CVE-2025-15661 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-66034 CVE-2026-66034 in libssh2 - Patched by Root

Root has patched CVE-2026-66034 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2023-53154 CVE-2023-53154 in cjson - Patched by Root

Root has patched CVE-2023-53154 in the cjson package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-54369 CVE-2026-54369 in acl - Patched by Root

Root has patched CVE-2026-54369 in the acl package for Root:Debian:13. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-59871 CVE-2026-59871 in tar - Patched by Root

Root has patched CVE-2026-59871 in the tar package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-59873 CVE-2026-59873 in tar - Patched by Root

Root has patched CVE-2026-59873 in the tar package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-42250 CVE-2026-42250 in bzip2 - Patched by Root

Root has patched CVE-2026-42250 in the bzip2 package for Root:Debian:12. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10819 AIKIDO-2026-10819 in axios - Patched by Root

Root has patched AIKIDO-2026-10819 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10823 AIKIDO-2026-10823 in axios - Patched by Root

Root has patched AIKIDO-2026-10823 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-58754 CVE-2025-58754 in axios - Patched by Root

Root has patched CVE-2025-58754 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-27152 CVE-2025-27152 in axios - Patched by Root

Root has patched CVE-2025-27152 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-59869 CVE-2026-59869 in js-yaml - Patched by Root

Root has patched CVE-2026-59869 in the js-yaml package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-5P4M-2WFM-XMQJ GHSA-5p4m-2wfm-xmqj in js-yaml - Patched by Root

Root has patched GHSA-5p4m-2wfm-xmqj in the js-yaml package for Root:npm. Multiple fixed versions available...

EUVD-2025-210746

The application generates uploaded file names using a weak and predictable method based on the request timestamp. This allows a remote attacker to accurately guess or brute-force the generated filename within a short time window. An attacker can successfully locate and access uploaded files, whic...

ROOT-OS-DEBIAN-12-CVE-2026-11850 CVE-2026-11850 in krb5 - Patched by Root

Root has patched CVE-2026-11850 in the krb5 package for Root:Debian:12. Multiple fixed versions available...

MLFlow < 2.8.1 - Sensitive Information Disclosure

An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API. id: CVE-2023-43472 info: name: MLFlow 2.8.1 - Sensitive Information Disclosure author: ritikchaddha severity: high description: | An issue in MLFlow versions...

mooSocial 3.1.8 - External Service Interaction

mooSocial 3.1.8 is vulnerable to external service interaction via multiple parameters in the post function. id: CVE-2023-43323 info: name: mooSocial 3.1.8 - External Service Interaction author: ritikchaddha severity: medium description: | mooSocial 3.1.8 is vulnerable to external service...

kkFileView 4.1.0 - Cross-Site Scripting

kkFileView 4.1.0 contains multiple cross-site scripting vulnerabilities via the errorMsg parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and...

Movies <= 0.6 - Cross-Site Scripting

A cross-site scripting vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php. id: CVE-2014-4539 info: name: Movies = 0.6 - Cross-Site Scripting author: daffainfo...